CWE-352

A cross site request forgery (CSRF) in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users.

The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows atta

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote a

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in c

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an at

Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious

Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. Th

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accou

WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6

FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/Api

A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowled

Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request forgery

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new

Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-si

The Wp Cookie Choice WordPress plugin through 1.1.0 is lacking any CSRF check when saving its options, and do not escape

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform an

The One User Avatar WordPress plugin before 2.3.7 does not check for CSRF when updating the Avatar in page where the [av

The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers t

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cros

The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing a

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow

The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which c

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to

The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could a

The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place whe

The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF w

Airangel HSMX Gateway devices through 5.2.04 allow CSRF.

Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by con

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which c

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could al

The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleti

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete a